Christmas Photos You Won’t Laugh At
SophosLabs analysts encountered another worm today in the form of W32/Rbot-GVR.
W32/Rbot-GVR not only contains the usual bot functionalities of a typical IRC backdoor Trojan but it also encompasses the ability to spread itself via MSN Messenger.
A slightly unusual aspect of the worm is that it drops a zipped file of itself as ‘Chirstmas-2007.zip’ (so much for the notion that malware authors can actually learn to spell) on the host computer. The worm can attempt to spread via MSN Messenger by attaching this zipped file to the message.
Typical messages sent consists of the following:
‘Christmas photo! :D’
‘xmas photo!: D’
‘haha :D’
‘lol, christmas pictures off me’
‘hola, My Christmas picture for you :)’
Obviously, if your computer happens to be infected by this worm, the joke is on you and this is hardly a laughing matter.
Posted on January 4th, 2008 by CheeHui, SophosLabs AUFiled under: General, Malware
Windows 7 security - A great leap forward or business as usual?
